Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    code-tool-langfuse

    Malicious code in code-tool-langfuse (npm)

    20 May 2026
    No fix available

    hpsetup

    Malicious code in hpsetup (npm)

    20 May 2026
    No fix available

    etherjs-utils

    Malicious code in etherjs-utils (npm)

    20 May 2026
    No fix available

    jsonbson

    Malicious code in jsonbson (npm)

    20 May 2026
    No fix available

    @mcpassure/mcp-cnes

    Malicious code in @mcpassure/mcp-cnes (npm)

    20 May 2026
    No fix available

    @mcpassure/mcp-anvisa-bulario

    Malicious code in @mcpassure/mcp-anvisa-bulario (npm)

    20 May 2026
    No fix available

    hardhat-gas-profiler-plugin

    Malicious code in hardhat-gas-profiler-plugin (npm)

    20 May 2026
    No fix available

    chainlink-price-feed-aggregator

    Malicious code in chainlink-price-feed-aggregator (npm)

    20 May 2026
    No fix available

    @rocketreach/rr-components

    Malicious code in @rocketreach/rr-components (npm)

    20 May 2026
    No fix available

    @tailwind-core/postcss

    Malicious code in @tailwind-core/postcss (npm)

    20 May 2026
    No fix available

    crypto-javascript

    Malicious code in crypto-javascript (npm)

    20 May 2026
    No fix available

    ganache-cli-provider

    Malicious code in ganache-cli-provider (npm)

    20 May 2026
    No fix available

    solna-web3

    Malicious code in solna-web3 (npm)

    20 May 2026
    No fix available

    solana-pda-helper

    Malicious code in solana-pda-helper (npm)

    20 May 2026
    No fix available

    foundry-deploy-helper

    Malicious code in foundry-deploy-helper (npm)

    20 May 2026
    No fix available

    ethers-multicall-utils

    Malicious code in ethers-multicall-utils (npm)

    20 May 2026
    No fix available

    @tailwind-core/vite

    Malicious code in @tailwind-core/vite (npm)

    19 May 2026
    No fix available

    lokal-mcp

    Malicious code in lokal-mcp (npm)

    19 May 2026
    No fix available

    tubebrain

    Malicious code in tubebrain (npm)

    19 May 2026
    No fix available

    to-cms

    Malicious code in to-cms (npm)

    19 May 2026
    No fix available

    @flowselections/core

    Malicious code in @flowselections/core (npm)

    19 May 2026
    No fix available

    @riteshkumar04/stack-audit

    Malicious code in @riteshkumar04/stack-audit (npm)

    19 May 2026
    No fix available

    martinez-polygon-clipping-tony

    Malicious code in martinez-polygon-clipping-tony (npm)

    19 May 2026
    No fix available

    morin

    Malicious code in morin (PyPI)

    19 May 2026
    No fix available

    aurapro-ui

    Malicious code in aurapro-ui (PyPI)

    19 May 2026
    No fix available

    did-0091

    Malicious code in did-0091 (npm)

    19 May 2026
    No fix available

    aurafarmer

    Malicious code in aurafarmer (PyPI)

    19 May 2026
    No fix available

    silly-logger

    Malicious code in silly-logger (PyPI)

    19 May 2026
    No fix available

    openirf

    Malicious code in openirf (PyPI)

    19 May 2026
    No fix available

    eplang

    Malicious code in eplang (PyPI)

    19 May 2026
    No fix available

    pycalendar-api

    Malicious code in pycalendar-api (PyPI)

    19 May 2026
    No fix available

    glass-of-water

    Malicious code in glass-of-water (PyPI)

    19 May 2026
    No fix available

    nebulix-ai

    Malicious code in nebulix-ai (PyPI)

    19 May 2026
    No fix available

    saas-common-lib-473815

    Malicious code in saas-common-lib-473815 (PyPI)

    19 May 2026
    No fix available

    clearml-truen-patch

    Malicious code in clearml-truen-patch (PyPI)

    19 May 2026
    No fix available

    zod-to-js

    Malicious code in zod-to-js (npm)

    19 May 2026
    No fix available

    soundsource

    Malicious code in soundsource (PyPI)

    19 May 2026
    No fix available

    buddyme

    Malicious code in buddyme (PyPI)

    19 May 2026
    No fix available

    qontract-reconcile

    Malicious code in qontract-reconcile (PyPI)

    19 May 2026
    No fix available

    crw

    Malicious code in crw (PyPI)

    19 May 2026
    No fix available

    venturo-playwright-runner

    Malicious code in venturo-playwright-runner (npm)

    19 May 2026
    No fix available

    collected-forms-embed-js

    Malicious code in collected-forms-embed-js (npm)

    19 May 2026
    No fix available

    venturo-playwright

    Malicious code in venturo-playwright (npm)

    19 May 2026
    No fix available

    @arbocollab/arbo-web-people

    Malicious code in @arbocollab/arbo-web-people (npm)

    19 May 2026
    No fix available

    @dknzo/soonex-ai

    Malicious code in @dknzo/soonex-ai (npm)

    19 May 2026
    No fix available

    @tarojs/cli

    Malicious code in @tarojs/cli (npm)

    19 May 2026
    No fix available

    clsx-js

    Malicious code in clsx-js (npm)

    19 May 2026
    No fix available

    workrally

    Malicious code in workrally (npm)

    19 May 2026
    No fix available

    dabrius-utils

    Malicious code in dabrius-utils (PyPI)

    19 May 2026
    No fix available

    btd-smart

    Malicious code in btd-smart (npm)

    19 May 2026
    No fix available